Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/t2s2NuJc0FYL44mQZJCKNZk0-3M.roa
File: t2s2NuJc0FYL44mQZJCKNZk0-3M.roa (raw, json)
Hash identifier: /AGo6zN6rX+j7/VF15oiwI2DJJSlsJDCOHc10wt6ero=
Subject key identifier: B7:6B:36:36:E2:5C:D0:56:0B:E3:89:90:64:90:8A:35:99:34:FB:73
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 0185390FBCF88B8402BBAB3E8D321061C4B2
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/t2s2NuJc0FYL44mQZJCKNZk0-3M.roa
Signing time: Thu 22 Dec 2022 09:00:10 +0000
ROA not before: Thu 22 Dec 2022 09:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47499
IP address blocks: 80.233.228.0/23 maxlen: 23
80.233.252.0/23 maxlen: 23
80.233.160.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:0f:bc:f8:8b:84:02:bb:ab:3e:8d:32:10:61:c4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Dec 22 09:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b76b3636e25cd0560be3899064908a359934fb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f4:ad:83:a3:6a:61:55:54:9d:f8:1d:55:4f:
c8:3c:d4:79:22:26:cd:17:1d:90:02:2d:e7:2e:98:
d0:94:b7:09:8a:b7:79:17:d1:fa:86:2e:eb:bb:2a:
ff:d7:80:25:3a:28:fe:75:61:a4:fd:22:d3:44:1f:
78:72:33:06:b0:17:28:2f:b8:c4:b7:13:ad:b0:bd:
78:bb:5e:5b:ba:d5:ae:fb:20:f0:5c:62:dd:7f:74:
03:be:3c:d8:ee:6f:ec:4a:53:3e:03:33:f0:c8:f3:
a9:8c:2b:d0:10:1d:a2:f5:22:20:cd:a0:52:5c:63:
ac:28:68:90:b2:57:3c:c9:f4:e6:66:32:25:02:b1:
a2:f7:92:d1:d1:48:9c:b4:86:74:9a:5d:b6:d4:c1:
49:18:2f:9c:59:5d:b1:12:4d:e1:e1:7d:71:aa:aa:
ae:3b:49:2f:1c:6e:9a:8d:47:e5:16:1d:fa:8f:a4:
3e:7e:b5:63:c4:d3:6e:69:1b:8b:fd:e0:85:5f:73:
3d:b7:8e:c8:44:1d:e5:f9:70:4c:99:16:ef:4c:82:
e8:ca:71:5c:6a:e1:c3:d5:f5:f8:c2:14:0f:ab:95:
9b:89:9a:aa:b2:42:d3:de:fa:aa:1c:3b:67:f3:3b:
e9:f7:7d:49:d0:5a:66:43:8d:c5:d8:7e:c9:ce:78:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6B:36:36:E2:5C:D0:56:0B:E3:89:90:64:90:8A:35:99:34:FB:73
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/t2s2NuJc0FYL44mQZJCKNZk0-3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.160.0/23
80.233.228.0/23
80.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
be:ef:74:8d:45:e7:67:d7:52:b5:7b:17:7f:61:1b:f8:75:1b:
92:c9:77:8b:99:25:09:fe:bd:46:75:91:3e:36:b6:bc:c9:3b:
10:33:75:e0:df:60:4f:42:7a:bc:24:86:26:92:99:65:57:6f:
17:f6:c6:9e:3c:de:2b:aa:24:f9:07:f2:67:93:ae:ea:ae:82:
9d:fd:21:17:34:35:c1:43:1f:67:4c:79:2a:6c:e0:15:c5:34:
72:a3:fb:22:bc:8c:e8:6f:d7:37:54:da:db:6b:c4:2c:21:dc:
2a:32:07:67:93:3e:32:14:71:e2:25:66:77:50:20:74:26:e9:
1e:6e:5c:09:9b:a5:09:e5:9c:89:21:1e:e7:cd:c5:00:a0:6b:
31:fe:78:fc:cf:25:aa:fc:66:e0:87:3b:d8:5c:ad:d5:35:4d:
06:70:3d:7d:4c:9c:75:9b:11:af:f9:bf:c4:eb:ff:27:28:73:
1a:da:cf:5f:e7:6d:43:f8:68:0f:83:ac:b7:13:17:f9:92:75:
74:e0:ea:6c:fe:8d:36:09:90:3a:f6:8e:5b:99:54:ab:6d:a4:
95:71:27:89:74:92:53:5c:c9:11:f3:0b:2e:a6:e1:f2:00:3a:
f9:3d:89:7d:8a:95:02:f9:8e:90:87:82:a9:4d:8e:39:a3:4d:
0a:68:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org